> Because the PHP devs and the researchers all explicitly stated that they have PoCs that can exploit it. Are they lying? Exaggerating? Spreading FUD?
We don't know, that's why we are asking for evidence.
> I am speculating as to why the ones who have the most information tell us something very different than a "random blogger who tried repos on github".
But do we know they have the most information? Or are they relying on the same thing everyone else is?
We don't know, that's why we are asking for evidence.
> I am speculating as to why the ones who have the most information tell us something very different than a "random blogger who tried repos on github".
But do we know they have the most information? Or are they relying on the same thing everyone else is?